Recent commits to derivepassphrase.git (ffed19d11cd8428f4b51aa0fc7c1b86080c77794)

Apply usability fixes to the SSH agent socket provider API

2026-08-30T17:33:11+02:00

The API definition actually requires the `typing-extensions` package,
but we forgot to declare that in `pyproject.toml`.

While it likely makes no typing difference, it is much better for
runtime checks to have `SSHAgentSocketProvider` be a runtime-checkable
protocol, instead of a string-valued type alias.  Among other things,
`isinstance(provider, SSHAgentSocketProvider)` fails if a string-valued
type alias is used.
</pre>

Adapt `derivepassphrase` to use `derivepassphrase-sshagentsocketprovider`

2026-08-30T12:26:14+02:00

Change all references to the SSH agent socket and socket provider types
to the `derivepassphrase-sshagentsocketprovider` package.  Include
`derivepassphrase-sshagentsocketprovider` in the dependencies.
</pre>

Extract the SSH agent socket provider API to a separate PyPI package

2026-08-30T10:25:08+02:00

A new Python package `derivepassphrase-sshagentsocketprovider` contains
the API definition and types necessary to write SSH agent socket
providers, without depending on the rest of `derivepassphrase`.

Because this is so intricately tied to `derivepassphrase`, the new
package does not set up a separate repository, separate documentation or
a separate wishlist.  The tests directory is functionally empty, because
there is nothing to test, from a unit test/code coverage perspective.
The README merely contains a short usage example.
</pre>

Fix project metadata errors

2026-08-29T23:04:14+02:00

  - Correct trove classifiers and license specification in
    `pyproject.toml`.  Remove outdated hatch configuration too.

  - Fix the copyright date in the license text.
</pre>

Co-exist peacefully with the fakesshagent variant of the stubbed SSH agent

2026-08-29T20:24:09+02:00

`fakesshagent` is the name of the planned package into which our stubbed
SSH agent will be extracted, and which `derivepassphrase` will depend on
in the future.

If we can load the stubbed SSH agent from that package, then deactivate
our own stub agent, do not register it, and provide compatibility links
for the rest of the test suite.  We also mark it as conditionally not
covered, using two new provisional coverage pragmas.
</pre>

Restructure testing data and testing machinery tests for better coverage

2026-08-29T19:17:34+02:00

We restructure `tests.data.SUPPORTED_KEYS` and
`tests.data.UNSUPPORTED_KEYS`, introducing a third category
`tests.data.CONDITIONALLY_SUPPORTED_KEYS` that contains the DSA-class
entries from the `UNSUPPORTED_KEYS` table, which are suitable for use
with vault if the agent supports deterministic DSA signatures.  We then
test the stub SSH agent's sign operation against these conditionally
supported keys as well, for the "with deterministic DSA" variant of the
stub agent.

This improves code coverage, because although such code paths were
previously already exercised in other tests of the test suite, with this
change, the `test_000_testing_machinery` module alone is sufficient to
achieve full code coverage on the stub SSH agent, in all three
variations.

Since we plan to extract the stub SSH agent from derivepassphrase's test
suite, the `test_000_testing_machinery` module alone contains all the
necessary code to test the extracted stub SSH agent (and its test keys).
</pre>

Fix typing and linting errors after tool upgrade

2026-08-29T18:45:38+02:00

</pre>

Update hatch use to "hatch check", and ruff to >= 0.16.0

2026-08-29T18:35:09+02:00

As part of the ruff upgrade, the hatch configuration uses rule names now
instead of rule codes.  The code still uses the rule codes, because
these are currently the only non-tool-specific notation available.
</pre>

Fix minor mistakes in old changelog entries

2026-08-29T18:03:13+02:00

  - The `"correctness"/"regression" split` phrase does not break
    properly in the browser when used with quotes.  The browser appears
    to have trouble finding the word boundaries in this case.

  - The entry for the introduction of SSH agent socket providers
    mentions that an Annoying OS-specific provider is yet to be written,
    even though two entries further down, that same socket provider is
    being introduced.
</pre>

Document recent test suite changes in the changelog

2026-08-29T18:01:11+02:00

  - Mention the "import unavailable" simulation, and the resulting
    reduction in test configurations.

  - Mention that Python 3.15 is now supported (and tested).
</pre>